Privacy Policy

Last updated: 27 March 2026

1. Introduction

[Company Name Pvt. Ltd.] ("SpotKare", "we", "us") operates a multi-tenant software-as-a-service platform for autism therapy centres in India. This Privacy Policy explains how we collect, use, store, and protect personal data when you use our platform at spotkare.com or any associated services.

We are committed to complying with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and all applicable Indian data protection laws.

2. Information We Collect

We collect data necessary to provide therapy centre management services:

  • Account information: Name, email address, mobile number, role, and centre affiliation for staff and parent accounts.
  • Therapy session data: Session notes, attendance records, assessment scores, progress observations, skill domain tracking, and goal plans — entered by therapists on behalf of children.
  • Child profiles: Name, date of birth, diagnosis details, and parent/guardian information as provided by the therapy centre.
  • Usage analytics: Page views, feature usage patterns, device type, and browser information — collected in aggregate to improve the service. No PII is included in analytics.

3. How We Use Your Data

  • Providing and maintaining the therapy management platform
  • Enabling session recording, progress tracking, and reporting
  • Sending notifications (in-app, SMS, WhatsApp, email) as configured by the centre
  • Generating billing and attendance reports for centres
  • Improving platform features and performance
  • Responding to support requests

4. Children's Data Protection

SpotKare handles therapy records for children, and we treat this data with the highest level of care. Children's personal data is processed only for the purpose of therapy management as directed by the centre. Therapy centres are responsible for obtaining parental or guardian consent before entering any child's data into the platform. We never use children's data for marketing, profiling, or any purpose beyond service delivery.

5. Data Storage & Security

All data is stored exclusively on servers located in India (Mumbai region). No personal data is transferred outside India under any circumstances. We implement industry-standard security measures including encryption in transit (TLS 1.2+), encryption at rest, role-based access controls, tenant isolation, and regular security audits.

6. Data Sharing

We do not sell, rent, or trade personal data. Data may be shared only with:

  • Infrastructure providers: India-based hosting and infrastructure services that process data on our behalf under strict contractual obligations.
  • Communication providers: SMS, WhatsApp, and email delivery services — limited to the minimum data needed for message delivery.
  • Legal obligations: When required by Indian law, court order, or government authority.

7. Data Retention

Therapy session data and child records are retained for the duration of the centre's active subscription plus 90 days. Upon termination, centres may request a full data export. After the retention period, data is permanently deleted. Audit logs required for compliance are retained for 7 years as per applicable regulations.

8. Your Rights Under the DPDP Act

As a Data Principal under the DPDP Act 2023, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request erasure of your personal data
  • File a grievance with our Grievance Officer
  • Nominate another person to exercise your rights on your behalf

To exercise any of these rights, contact us at hello@spotkare.com.

9. Cookies & Analytics

We use essential cookies for authentication and session management. Optional analytics cookies help us understand usage patterns. No third-party advertising cookies are used. You can control cookie preferences through your browser settings.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notification at least 30 days before they take effect. Continued use of the platform after changes constitutes acceptance.

11. Contact Us

For any privacy-related questions or to exercise your data rights, contact us at hello@spotkare.com.

[Company Name Pvt. Ltd.]
Patna, Bihar, India

To file a formal grievance or contact our Data Protection Officer, visit our Grievance Redressal & DPO contact page.